Release v3.6.0

[raaymax]

Highlights

• Logins now persist — the app remembers you across browser/app restarts instead of logging you out constantly (the long-standing "logs me off all the time" issue).
• Stronger end-to-end key handling — your private key is stored as a non-extractable key in the browser (can't be exfiltrated), and the server no longer receives your encryption key on login.

⚠️ Action required: everyone logs in once

The session and key model changed, so all users must log in again one time after this deploys. This is expected and one-time. DM history is preserved (the underlying private key is unchanged).

What's included

• Persistent sessions (fix(session): make auth sessions persistent across restarts #298) — auth cookies are now persistent (Max-Age + Secure + SameSite), with server-side session expiry, sliding refresh, a MongoDB TTL index, and crypto-strong unique tokens.
• Non-extractable key storage (feat(auth): store private key non-extractable in IndexedDB, drop split-key #299) — the XOR split-key scheme is gone; the private key is derived locally at login and stored as a non-extractable CryptoKey in IndexedDB. The server no longer issues the key cookie.
• Server can no longer decrypt (fix(auth): stop sending the encryption key to the server on login #300) — the login credential was derived identically to the encryption key, so the server received the key on every login. The auth hash is now domain-separated from the key. Existing accounts migrate transparently on next login (dual-hash), with a kdf marker + deno task auth:status to confirm migration.
• Release workflow fix (ci(release): trigger docker build via workflow_dispatch #297) — the docker build is now triggered via workflow_dispatch, fixing the startup_failure that broke v3.5.1's automated release.

Post-deploy notes

• After everyone has logged in once, deno task auth:status (run inside the chat container) should report all real accounts migrated; the transitional legacyPassword path can then be removed in a follow-up.
• Known follow-ups (not in this release): raise PBKDF2 iterations + random salt (needs a one-time blob re-wrap on login).

[github-actions]

Docker image

ghcr.io/raaymax/quack:build-97

[github-actions]

Docker image

ghcr.io/raaymax/quack:build-98